CBTProc
OPThread
SGThread
Static task
static1
Behavioral task
behavioral1
Sample
359caed6505dd8a22d53918ab5ae828d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
359caed6505dd8a22d53918ab5ae828d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
359caed6505dd8a22d53918ab5ae828d_JaffaCakes118
Size
60KB
MD5
359caed6505dd8a22d53918ab5ae828d
SHA1
9832ba0c2c2deb7ad26cdc529fec444e8c7a3c0f
SHA256
f6ba2918bc50d177d229543e9c6c5c7af8edd1b7b3ea9678ac87b4de94c99cce
SHA512
bfde77ccf633f72f6bc13ddde1826368b778bde116d2270a8294d626ad8e67a44feb69199d41762ad4f887ddc096041bc6d9bab92edc05ed6997aa0c27c921f8
SSDEEP
768:7d615KWCEugCVr0PhzN4ng27tzH8M2S57A9IsYVdpLJsdXILGlrMiml6m:7ELtN2ruxN4gIVHR5smsSdpLJQyll6m
Checks for missing Authenticode signature.
resource |
---|
359caed6505dd8a22d53918ab5ae828d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
OpenEventA
WaitForSingleObject
CreateEventA
LoadLibraryA
GetModuleFileNameA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
GetProcAddress
HeapSize
InitializeCriticalSection
GetSystemInfo
VirtualProtect
ExitProcess
GetCurrentThreadId
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
RtlUnwind
InterlockedExchange
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
EnumWindows
GetWindowRect
ScreenToClient
PostMessageA
GetWindowTextA
GetDlgItem
IsWindowVisible
ShowWindow
GetDlgCtrlID
SendMessageA
CallNextHookEx
CBTProc
OPThread
SGThread
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ